What to do

Verify that you have opened the Remote Management System (RMS) ports on the Windows Firewall: these are ports 8192 and 8194, and ensure that there is no network device between your clients and the Enterprise Console, which could be blocking RMS communication. The following article gives an overview about how the firewalls have to be set up:http://www.sophos.com/en-us/support/knowledgebase/110297.aspx

In the Enterprise Console verify that the affected clients are not members of the Unassigned group. If the clients are member of the Unassigned group then move them to one of the groups you have set up.

In Enterprise Console select the clients which are ‘Awaiting Policy from Console’ or ‘Awaiting Response from Console Status’ then right-click on a client and select ‘Comply with All Group Policies’.

If the status of the client does not change, run the Sophos Diagnostic Utility (SDU) on an affected computer and on the server hosting the Sophos Enterprise Console (if there is a Message Relay between the client and Enterprise Console run the SDU there as well).